From 66e6177ea921d28309d43afe3dd220ce4ab74b1f Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Mon, 22 Mar 2021 20:13:16 +0100 Subject: [PATCH] package/wpa_supplicant: annotate CVE-2021-27803 Add a WPA_SUPPLICANT_IGNORE_CVES entry for CVE-2021-27803 which was fixed by commit 9ada4eb2f1c3d67ee49f6f5466738bcd821fc647, which we have backported as 0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch. Signed-off-by: Fabrice Fontaine Signed-off-by: Thomas Petazzoni (cherry picked from commit 1a7cf592a834357c5777e452f0b7ab7652e7d389) Signed-off-by: Peter Korsgaard --- package/wpa_supplicant/wpa_supplicant.mk | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package/wpa_supplicant/wpa_supplicant.mk b/package/wpa_supplicant/wpa_supplicant.mk index 9f6f18382f..c4e98cf609 100644 --- a/package/wpa_supplicant/wpa_supplicant.mk +++ b/package/wpa_supplicant/wpa_supplicant.mk @@ -21,6 +21,9 @@ WPA_SUPPLICANT_LDFLAGS = $(TARGET_LDFLAGS) # 0001-AP-Silently-ignore-management-frame-from-unexpected-.patch WPA_SUPPLICANT_IGNORE_CVES += CVE-2019-16275 +# 0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch +WPA_SUPPLICANT_IGNORE_CVES += CVE-2021-27803 + # install the wpa_client library WPA_SUPPLICANT_INSTALL_STAGING = YES